ipsec.conf 490 B

1234567891011121314151617181920212223242526
  1. # /etc/ipsec.conf - strongSwan IPsec configuration file
  2. config setup
  3. ca strongswan
  4. cacert=strongswanCert.pem
  5. certuribase=http://ip6-winnetou.strongswan.org/certs/
  6. crluri=http://ip6-winnetou.strongswan.org/strongswan.crl
  7. auto=add
  8. conn %default
  9. ikelifetime=60m
  10. keylife=20m
  11. rekeymargin=3m
  12. keyingtries=1
  13. keyexchange=ikev1
  14. fragmentation=yes
  15. conn rw
  16. left=PH_IP6_MOON
  17. leftcert=moonCert.pem
  18. leftid=@moon.strongswan.org
  19. leftsubnet=fec1::/16
  20. leftfirewall=yes
  21. right=%any
  22. auto=add